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BACKGROUND OF THE INVENTION 
Field of the Invention 

[0003] The present invention is related to performing terminal authentication and call processing 
in a private wireless high-speed data system. More particularly, the present invention is related to 
performing terminal authentication and call processing in a private wireless high-speed data system 
wherein, when a call is connected between a wireless terminal of a wireless high-speed data system 
(CDMA Ix EV-DO) scheme and a private (premises) EV-DO wireless network. Private EV-DO 
wireless network authentication and private connection call processing of a terminal are performed 
using session information of the corresponding terminal registered in the public EV-DO wireless 
network. 

Description of the Related Art 
[0004] Generally, a CDMA Ix EV-DO (hereinafter, referred to as EV-DO) wireless network is 
a new packet wireless data transmission technology developed using CDMA technology by 
Qualcomm, which allows mega class high-speed data transmission. The EV-DO wireless network 
has a maximum transmission speed of 2.4Mbps in a forward direction and 307.2Kbps in a 
backward direction, which is the same transmission speed as that of an asymmetric digital 
subscriber line (ADSL) scheme used in a wired network, 

[0005] EV-DO is being developed because the Ix RTT system of an IMT-2000 MC 
(Multi-Carrier; synchronous), which supports both voice and data and has been tested for 
commercial use, has a high-speed data transmission limit of 1 .25MHz bandwidth and does not 
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support data transmission of 144 Kbps or more in an IS-95 scheme. That is, EV-DO is a 
supplementary solution for high-speed data transmission. 

[0006] EV-DO provides a connection to the data dedicated Internet over a data core network 
(DCN) in an existing IS-95 network. It can support the same data transmission speed as an 
existing network, even in the third generation (3G) network. 

[0007] EV-DO has an average forward transmission speed allowing high-speed data 
communication of several hundred kbps. Notwithstanding, the radio frequency bandwidth used 
is 1 .25MHz, which is the same as a mobile phone used in a current CDMA One. 
[0008] Considering that a bandwidth of 5 MHz is required to provide 384bps service in 
IMT-2000, EV-DO has an improved high frequency usage efficiency. 

[0009] That is, EV-DO has been designed in a manner suitable for data communication that is 
not affected by delay when transfer data is burst data as in the Intemet, realizing the high-speed 
transmission with a frequency bandwidth narrower than that of IMT-2000. 
[0010] Further, EV-DO performs a function of automatically adjusting backward transmission 
speed at a base station side according to communication quality between a terminal and a base 
station. This function is realized by monitoring a signal from the terminal received at the base 
station every 1 .67milliseconds to determine the communication quality and by adjusting data 
transmission priority and speed with the terminal. 

[0011] EV-DO improves data communication quality by preferentially increasing transmission 
speed for a terminal in the vicinity of the base station where electrical wave interference is less 
while by reducing communication speed for a terminal located far from the base station. 
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1 [0012] A typical wireless network is classified into a wireless public network and a wireless 

2 private network, which is used at groups, companies, or the like having a particular purpose. The 

3 wireless private network is configured to interface with a particular wireless public network. On 

4 the other hand, in the above-described EV-DO wireless network, only public EV-DO wireless 

5 ^ network service provided by a mobile communication service provider exists and there is no 

6 private EV-DO wireless network service, unlike the typical wireless network. 

^ [0013] Thus, methods are being developed which use a part of a public EV-DO wireless network 

& as a private EV-DO wireless network. These methods allow one mobile terminal to be served by 

9 the private EV-DO wireless network in a particular region (private region) while being served by 

10 the public EV-DO wireless network in other regions. 

1 1 [0014] One of these methods was proposed in Korean Patent Application No. 1 0-2002-0054625, 

1 2 filed on September 1 0, 2002 by the present Applicant and entitled "Method and System for Using 

13 in Common a Public Network and a Private Network in a Wireless High-speed Data System". 

14 [0015] The proposed "Method and System for Using in Common a Public Network and a Private 

15 Network in a Wireless High-speed Data System" will be simply discussed. Among methods for 

16 implementing a private EV-DO wireless network (private network) in an EV-DO network, the 

1 7 following methods have been suggested therein in configuring a data location register (DLR) and 

1 8 AN_AAA needed for the EV-DO configuration. 

19 [0016] First, in the case of the DLR, there is a scheme of handling a private network connection 

20 by allowing a direct connection to the public network DLR in order to configure the private 

21 network or by disposing a private dedicated DLR in the private network. Further, in the case of 

Page 4 of 42 



PATENT 
P57051 

1 the AN_AAA, private authentication is handled by allowing a direct connection to the public 

2 network AN_AAA in order to handle private network connection authentication or by disposing 

3 a private dedicated AN_AAA in a private network, as in the DLR. 

4 [0017] However, though such methods have their own merits, they have the following problems. 

5 [0018] First, the method where a public network is shared without a separate private network 

6 , DLR results in increasing the load on the public network DLR since the mobile conmiunication 
^ service provider has to provide private network service. That is, since the terminal used in the 
& private network uses the public network DLR in a private network connection and other steps 

9 using the private EV-DO wireless network even though it is registered in the public network, there 

10 is a problem in that the public network DLR usage time is increased because of the new service 

1 1 provision. 

1 2 [0019] Since an initial DLR was designed without consideration of the private network service, 

13 a problem occurs in that the operation of the public DLR is greatly affected when the number of 

14 private EV-DO wireless networks is significantly increased. 

15 [0020] In the second method of installing the private dedicated DLR which has the same 

16 function as the public network DLR in the private network, problems occur in that the private 

17 terminal cannot respond to a paging request of the public network, the private EV-DO wireless 

1 8 network cannot be connected to the public network, and public network and private network DLR 

19 loads are increased due to fi-equent subnet changes. 

20 [0021] Also, in the third method of sharing the public network AN_AAA by installing the 

21 AN_AAA in the private network for the private network authentication and connecting to the 
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1 public network AN AAA through the private network AN AAA, there is a problem in that a 

2 dedicated line is needed for connecting the public network AN_AAA to the private network 

3 AN_AAA and it is not easy to permit a selective private network connection. 

4 [0022] Also, there is a method for managing a private network dedicated AN_AAA to effect 

5 ^ private network authentication. However, a problem occurs in that server installation costs 

6 ^ increases since a high performance dedicated AN_AAA server is needed, and the cost of operation 

I for managing the server increases. 

8 SUMMARY OF THE INVENTION 

9 [0023] It is, therefore, an object of the present invention to provide an apparatus and method of 

10 performing terminal authentication and call processing in a private wireless high speed data 

I I system, wherein when there is the first call connection from a DLR arranged in a private network 

1 2 terminal and the private network DLR is coupled to a public network DLR using a dedicated line, 

13 session information for processing a call is secured from the public network DLR, the secured 

14 session information is stored in the private network DLR, and then the call processing is 

15 performed, and upon there being a fiirther call connection from the private network terminal, the 

16 private network performs the call processing according to the session information stored in the 

1 7 private network DLR, so that unnecessary loading of the public network DLR can be eliminated. 

1 8 [0024] Also, it is another object of the present invention to provide an apparatus and method of 

19 performing terminal authentication and call processing in a private wireless high speed data 

20 system, wherein the private network DLR extracts an IMSI (International Mobile Station Identity) 

Page 6 of 42 



PATENT 
P57051 

1 of a terminal included in session information secured from a public network DLR and compares 

2 the extracted IMSI with an IMS! of a private registration terminal, without needing a separate 

3 AN_AAA for terminal authentication in the private network, so that the private registration 

4 terminal authentication can be performed. 

5 M. [0025] According to an aspect of the present invention, a system is provided comprising: a 

6 ^ private EV-DO wireless network coupled to a public EV-DO wireless network including a data 
^ location register adapted to provide private EV-DO wireless data service; a relay unit adapted to 
3 relay a corresponding call connection request signal upon the call connection request signal being 

9 received from a terminal entering the private EV-DO wireless network; a call processor adapted 

10 to generate a session information request signal with respect to the corresponding terminal upon 

1 1 the call connection request signal relayed from the relay unit being a first call connection request 

12 signal, and to perform call processing by assigning a traffic chaimel to the connection terminal 

13 according to the received session information upon the session information corresponding to the 

14 requested session information request signal being received; and a session information processor 

1 5 adapted to request the session information request signal of the corresponding terminal generated 

16 by the call processor from a public network data location register in the public EV-DO wireless 

1 7 network, to extract authentication information of the terminal included in the session information 

1 8 of the corresponding terminal received from the public network data location register, to store the 

19 received session information of the corresponding terminal in a database upon the extracted 

20 authentication information being authentication information of the terminal registered in the 

2 1 private EV-DO wireless network, and to provide the call processor with the corresponding session 
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information. 

[0026] Preferably, the authentication information includes an IMSI (International Mobile Station 
Identity). 

[0027] Preferably, the session information processor is coupled to a data location register of the 
public EV-DO wireless network with a dedicated line. 

[0028] Preferably, the session information processor provides the call processor with the session 
information of the corresponding terminal stored in the database upon the first call being 
connected to the session information processor without performing a separate terminal 
authentication process and without requesting the session information of the corresponding 
terminal from the public data location register of the public EV-DO wireless network, upon a 
connected call of the terminal received through the relay xmit being a second or further connection 
call. 

[0029] Preferably, the terminal includes a temporary identifier information generator adapted 
to add temporary identifier information to a call connection request signal transmitted to the relay 
unit upon a call being connected to the private EV-DO wireless network, the temporary identifier 
information being used to determine whether a corresponding call is a connection call to be 
connected to the public EV-DO wireless network or a connection call to be connected to the 
private EV-DO wireless network. 

[0030] Preferably, the call processor includes a routing module adapted to determine whether 
the corresponding terminal connection call is a private EV-DO wireless network connection call 
or a public EV-DO wireless network connection call according to temporary identifier information 
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1 included in the call connection request signal transmitted to the relay unit from the terminal, and 

2 to rout the corresponding call to one of the private EV-DO wireless network and the public E V-DO 

3 wireless network in accordance with a result of the determination. 

4 [0031] Preferably, the system further comprises a data packet service node adapted to provide 
5^ a corresponding terminal with data via an Intranet in the private EV-DO wireless network through 
6 the call processor upon a traffic channel to the corresponding terminal being assigned from the call 
"7 processor and the call processing being performed. 

5 [0032] According to another aspect of the present invention, a method is provided comprising: 

9 arranging a private EV-DO wireless network including a private base station, a private control 

10 station, and a private data location register, the private EV-DO wireless network being coupled 

11 to a public EV-DO wireless network including a public data location register; transmitting a call 

12 connection request signal of a corresponding terminal to the private control station by the private 

13 base station upon a call connection request being received in the private base station from a 

14 terminal entering the private EV-DO wireless network; requesting session information of the 

1 5 terminal for processing a call of the corresponding terminal to the private data location register by 

16 the private control station according to the call connection request signal transmitted from the 

17 private base station; determining in the private data location register whether the session 

1 8 information requested from the private control station is registered in a database and determining 

19 that the session information of the corresponding terminal is a private EV-DO wireless network 

20 connection call and requesting the session information of the corresponding terminal to a public 

21 data location register of the public EV-DO wireless network when the session information of the 
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1 corresponding terminal is not registered and receiving the session information of the corresponding 

2 terminal from the public data location register; performing private authentication of the 

3 corresponding terminal in the private data location register using authentication information 

4 included in the session information of the received corresponding terminal and transmitting the 

5 i. session information of the corresponding terminal to the private control station and storing the 

6 corresponding session information in a database upon the corresponding terminal being determined 
-7 to be a private registered terminal; and assigning a traffic channel of the corresponding terminal 
^8 according to the session information of the terminal transmitted from the private data location 

9 register and performing data service through the assigned channel with the private control station. 

10 Preferably, the terminal transmits the call connection request signal to the private control 

1 1 station and additionally transmits temporary identifier information used to determine whether the 

12 corresponding call is a public EV-DO wireless network connection call or a private EV-DO 

13 wireless network connection call upon a call connection request signal being transmitted to the 

14 private base station. 

1 5 [0033] Preferably, requesting the session information of the terminal to the private data location 

1 6 register includes analyzing temporary identifier information included in the call connection request 

17 signal transmitted to the private base station from the terminal in the private control station and 

1 8 selectively routing a corresponding call connection request signal to a data location register of one 

19 of the public EV-DO wireless network and the private EV-DO wireless network. 

20 [0034] Preferably, in receiving the session information of the corresponding terminal from the 

21 public data location register, upon the session information requested from the private control 
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1 Station being registered in the database, the private data location register determines that the call 

2 connection of the corresponding terminal is not the first call connection but is a second or further 

3 call connection and provides the control station with the session information of the terminal stored 

4 in the database without authentication of a separate terminal 

5 [0035] Preferably, the private information includes an IMSI (International Mobile Station 

6 ^ Identity). 

[0036] According to yet another aspect of the present invention, a method is provided 

js comprising: arranging a private EV-DO wireless network system coupled to a public EV-DO 

9 wireless network system including a public data location register; determining whether a call 

10 connection of the corresponding terminal is a private EV-DO wireless network connection call or 

1 1 a public EV-DO wireless network connection call upon a call connection being requested from a 

1 2 terminal entering a private EV-DO wireless network; determining whether session information for 

13 the corresponding terminal exists in a database upon a determination that the corresponding call 

14 is a private EV-DO wireless network connection call; requesting the session information of the 

15 terminal for performing the private authentication and the call processing of the corresponding 

16 terminal to a public data location register located in the public EV-DO wireless network upon a 

17 determination that the session information for the corresponding terminal does not exist in the 

18 database; extracting IMSI (Intemational Mobile Station Identity) information for authenticating 

19 a terminal included in the session information of the received corresponding terminal upon the 

20 session information of the corresponding terminal being received from the public data location 

2 1 register; determining whether the extracted IMSI information of the terminal is IMSI information 
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1 of the terminal registered in the private EV-DO wireless network and performing private 

2 authentication of the corresponding terminal; and assigning a traffic channel of the corresponding 

3 terminal using the session information of the corresponding terminal and performing data service 

4 to the terminal through the assigned channel upon the authentication of the terminal being 

5 ^ completed after storing the session information of the corresponding terminal in the database. 

6 [0037] Preferably, determining whether the session information for the corresponding terminal 
^1 exists in the database includes determining that the connection call of the corresponding terminal 
j8 is a second or further connection call and assigning the traffic channel of the corresponding 

9 terminal using the session information of the corresponding terminal stored in the database without 

10 private authentication of a separate terminal upon the session information for the corresponding 

1 1 terminal existing in the database and performing data service to the terminal through the assigned 

12 channel. 

1 3 [0038] The following patents each discloses features in common with the present invention but 

14 do not teach or suggest the inventive features specifically recited in the present application: U.S. 

15 Patent Application No. 2004/0048601 to Lee, entitled METHOD AND SYSTEM FOR USING 

16 EITHERPUBLICORPmVATENETWORKSINlxev-DOSYSTEM,^\xh\i^h^^ 1 1, 2004; 

17 U.S. Patent Application No. 2003/0078047 to Lee et al, entitled APPARATUS, METHOD AND 

18 SYSTEM FOR MATCHING SUBSCRIBER STATES IN NETWORK IN WHICH PUBLIC LAND 

19 MOBILE NETWORK AND WIRED/WIRELESS PRIVATE NETWORK ARE INTERWORKED, 

20 published on April 24, 2003; U.S. Patent Application No. 2003/0069013 to Lee et al, entitled 

21 APPARATUS, METHOD AND SYSTEM FOR MATCHING SUBSCRIBER STATES IN NETWORK 
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1 IN WHICH PUBLIC LAND MOBILE NETWORK AND WIRED/WIRELESS PRIVATE NETWORK 

2 AREINTERWORKED, published on April 10,2003; U.S. PatentNo. 6,704,569 to Larson, entitled 

3 CENTRALIZED USER DATABASE AND ADMINISTRATIVE NODE CONNECTING PRIVATE 

4 AND PUBLIC WIRELESS COMMUNICA TIONS SYSTEMS, issued on March 9, 2004; U.S. Patent 
5 . No. 6,697,621 toTahae/a/., entitled METHOD AND APPARATUS FOR PROVIDING SERVICES 
6 IN A PRIVATE WIRELESS NETWORK, issued on February 24, 2004; and U.S. Patent No. 
-7 6,687,213 to Sayerse^a/., entitled METHOD AND APPARATUS FOR INTEGRATED WIRELESS 
,8 COMMUNICATIONS IN PRIVATE AND PUBLIC NETWORK ENVIRONMENTS, issued on 

9 February 3, 2004. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

1 1 [0039] A more complete appreciation of the invention, and many of the attendant advantages 

12 thereof, will be readily apparent as the same becomes better understood by reference to the 

1 3 following detailed description when considered in conjunction with the accompanying drawings, 

14 in which like reference symbols indicate the same or similar components, wherein: 

1 5 [0040] FIG. 1 is a view showing a network connection construction between a private wireless 

1 6 high-speed data system (private EV-DO wireless network) and a public wireless high-speed data 

17 system (public EV-DO wireless network) in accordance with an embodiment of the present 

18 invention; 

1 9 [0041] FIG. 2 is a view showing a procedure of call processing between a private network and 

20 a public network when the call is first connected in the private network, in a method for 
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1 performing terminal authentication and call processing in a private wireless high-speed data system 

2 in accordance with an embodiment of the present invention; 

3 [0042] FIG. 3 is a view showing a procedure of call processing when the call is connected again 

4 in the private EV-DO wireless network 200 after the procedure shown in FIG. 2 (after the private 
5 . EV-DO wireless network tries to connect first call); and 

6 ^ [0043] FIG. 4 is a view showing an operational flowchart for a method of performing terminal 

'7 authentication and call processing in a private wireless high-speed data system in accordance with 

,8 an embodiment of the present invention. 

9 DETAILED DESCRIPTION OF THE INVENTION 

1 0 [0044] Hereinafter, an embodiment of an apparatus for performing terminal authentication and 

1 1 call processing in a private wireless high-speed data system and a method thereof in accordance 

1 2 with an embodiment of the present invention will be described with reference to the accompanying 

13 drawings. 

14 [0045] FIG. 1 is a view showing a network connection construction between a private wireless 

15 high-speed data system (private EV-DO wireless network) and a public wireless high-speed data 

16 system (public EV-DO wireless network) in accordance with an embodiment of the present 

1 7 invention. The constructions of the public EV-DO wireless network 1 00 and the private EV-DO 

18 wireless network 200 will be separately described in order to explain the construction and 

1 9 operation of the present invention. 

20 [0046] First, as shown in FIG. 1 , a terminal (AT: Access Terminal, 1 1 0) of the public EV-DO 
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1 wireless network 1 00 is a terminal which is commonly used in the public EV-DO wireless network 

2 100 and the private EV-DO wireless network 200, and a terminal 210 of the private EV-DO 

3 wireless network 200 is conmionly used in the private EV-DO wireless network 200 which is also 

4 registered in the public EV-DO wireless network 100. 

5 . [0047] Further, each of ANTSs (Access Network Transceiver System: 1 20, 1 20a, 1 20b: public 

6 ^ network base station) in the public EV-DO wireless network 1 00 has desired public wireless areas, 

'7 establishes a session when a terminal enters the areas, and performs a necessary operation when 

,8 a necessary identifier (UATI : Unicast Access Terminal Identifier) is assigned to a corresponding 

9 AT 1 10. Also, the ANTSs 120, 120a, 120b enable a call to be received in the AT 1 10, or relay a 

10 call connection request signal to ANCs (Access Network Control: 130, 130a, 130b) when there 

11 is a call connection request firom the AT 1 1 0. 

12 [0048] Eachofthe ANCs 130and 130a is connected to a CAN (Global Area Network, hub) 140, 

13 and the GAN is connected to AN AAA (Access Network Authentication Accounting 

1 4 Authorization) 1 70 which takes charge of public network authentication, public network terminal 

15 authentication and so on, a PDSN (Packet Data Serving Node) 1 80 which provides the terminal 

16 with an Internet service, a DLR (Data Location Register) 160 which stores terminal information, 

17 terminal location information and so on, and a BSM (Base System Manager) 150 which takes 

18 charge of loading, failure, diagnosis, statistics and so on and performs a data relay between each 

19 of the nodes. Also, although the ANTSs 120, 120a, 120b of the public EV-DO wireless network 

20 1 00 can be connected to the GAN 1 40, it is not shown in FIG. 1 . 

21 [0049] Though the PDSN 1 80 can be connected to other packet service nodes or to a pPDSN 
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1 250 of the private EV-DO wireless network 200 through an Internet, it is not shown in the drawing. 

2 [0050] The DLR 160 stores information on terminals 110 and 210 registered in the pubhc 

3 EV-DO wireless network 1 00 (for example, MN ID (IMSI) information) and location information, 

4 and provides information on the terminals 110 and 210 when a session of the corresponding 

5 ► terminal is updated. Also, the DLR 160 stores information on a terminal included in a general 

6 wireless public network. The terminal information of the general wireless public network can 
-7 include at least one of terminal information, user information and service grade information. 

,8 [0051] On the other hand, the ANTS 220 in the private EV-DO wireless network 200 provides 

9 the AT 210 entering the private area with an incoming call, or relays a call connection signal to 

10 pANC (Private Access Network Control) 230 when a call connection is carried out from the 

11 terminal 210. 

12 [0052] The pANC 230 can include a router module (hub) which determines whether an outgoing 

13 data call is an outgoing call to be connected to the public network or an outgoing call to be 

14 connected to the private network using an identifier included in a data call originated from the AT 

15 210, routes it to the ANC 130 ofthe public EV-DO wireless network 100 when the data call is the 

16 public network connection outgoing call, and routes the outgoing call in order to process a call in 

17 the private network EV-DO wireless network 200 when the outgoing call is a private network 

1 8 connection outgoing call. 

19 [0053] The router module has a specific server address which has been already determined. 

20 Such a server address is compared with information of a temporary identifier. When a call is 

21 requested to a temporary identifier terminal in which a temporary identifier address having a 
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specific server is already determined, the call is detected as a call in the private EV-DO wireless 
network 200 and the corresponding call is routed to the pANC 230. 

[0054] For example, a temporary identifier of the private EV-DO wireless network 200 
subscriber is assigned so as to have an address of a server which has been already determined. In 
the case that the determined server address is a server of "samsung.co.kr" or a "Samsung.com" 
DML server, for example, the terminal 210 in the private EV-DO wireless network 200 can have 
an address of '41 l@samsung.co.kr'\ 

[0055] As described above, if it is requested that the AT 210 in the private EV-OD wireless 
network 200 is to be connected to one of server addresses which have been determined already or 
a call is to be connected to a terminal having the server described above, for example, a terminal 
of "aaa@samsung.co.kr", the call is determined to be a call in the private EV-DO wireless network 
200. 

[0056] When any one of a server included in the temporary identifier of the AT 2 1 0 requiring 
a call, a server which is required to receive a call, and a temporary identifier server of a terminal 
which is required to receive a call is not an address determined already, the corresponding call is 
determined to be a connection call of a public EV-DO wireless network 100 and routed to the 
ANCs 130 and 130a of the public EV-DO wireless network 100. 

[0057] The pANC 230 including such a router module stores information on a location of a 
private AT 210 and other authentication and provides necessary information for processing the call 
when a call is connected from the private EV-DO terminal AT 210, and is connected to a pDLR 
240 which performs authentication of the private EV-DO terminal AT 210 using the stored 
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1 terminal authentication information IMSL 

2 [0058] Further, the pANC 230 is connected to a pPDSN 250 in which the private EV-DO 

3 terminal AT 21 0 is provided with Intemet service through an Intranet, and to a WSM 260 which 

4 takes charge of loading, failure, diagnosis and statistic of the private EV-DO wireless network 200. 

5 * Network components of the private EV-DO wireless network 200 as described above are similar 

6 to those of the public EV-DO wireless network 1 00 in their properties and functions. 

- 7 [0059] However, when the pDLR 240 of the private EV-DO wireless network 200 performs a 

.8 few different functions from the public network DLR 160 in order to support a private network 

9 and, especially, the pDLR 240, being the private DLR, also performs the private terminal 

10 authentication function so that separate AN AAA equipment is not used. 

1 1 [0060] An operation of the private EV-DO wireless network system interlocked to the public 

12 EV-DO network system in accordance with an embodiment of the present invention constructed 

13 as noted above is described below in detail. 

14 [0061] First, the private EV-DO wireless network 1 00 is constructed by adding the pANC 230 

15 between the public network ANTS 120 and the public network ANC 130 and network elements 

16 necessary for the EV-DO service as shown in FIG. 1 . 

1 7 [0062] One of important functions of the pANC 23 0 is to discriminate and transmit all kinds of 

1 8 messages coming from the private ANTS 220 to the public EV-DO wireless network 1 00 and the 

19 private EV-DO wireless network 200. The router module in the pANC 230 takes charge of this 

20 function as described above. 

21 [0063] For example, when the EV-DO wireless terminal AT 210 located in the private EV-DO 
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1 wireless network 200 tries to have an access to the pubHc E V-DO wireless network 1 00, the p ANC 

2 230 recognizes an identifier (discriminator) included in a message transmitted by the private 

3 ANTS 220, transmits the message to the public network ANC 130, and makes it possible to 

4 connect to the public EV-DO wireless network. 

5 . [0064] When the terminal AT 2 1 0 tries to connect to the private EV-DO wireless network 200, 

6 as in the public network, the pANC 230 confirms a discriminator included in a message 

'1 transmitted from the private ANTS 220 and enables the pANC 230 to support the private EV-DO 

^8 wireless network 200 service using a network element installed in the premises. For reference, a 

9 discriminator to discriminate between the private EV-DO wireless network 200 and the public 

1 0 EV-DO wireless network 1 00 is provided from the EV-DO wireless terminal AT 2 1 0. 

1 1 [0065] The EV-DO wireless network 200 provides the private EV-DO wireless network 200 

12 service while maintaining a session established in the public EV-DO wireless network 1 00 in the 

13 private EV-DO wireless network 200, which has the following advantages. 

14 [0066] First, the terminal AT 2 1 0 in the private EV-DO wireless network 200 can respond to 

15 a public network paging and a load increase of the public network DLR can be prevented since 

16 processing due to a subnet change does not occur. 

1 7 [0067] Also, since all of tasks related with an initial session establishment are performed outside 

18 the private EV-DO wireless network 200, it is possible to embody a fimction of the pDLR 240 

19 being a private DLR with ease compared with the public network DLR 1 60. 

20 [0068] On constructing the pDLR 240 in the private EV-DO wireless network 200, it is possible 

21 to embody the pDLR 240 being the private DLR using a less expensive server than that of the 

Page 19 of 42 



PATENT 
P57051 

public network DLR 1 60, and it is possible to use the authentication result embodied in the public 
network instead of a separate private AN_AAA when authenticating the private terminal AT 2 1 0. 
[0069] As a result, tasks related to the session establishment and cancellation which occur in 
the public EV-DO wireless network 1 00 are not generated in the private E V-DO wireless network 
200, wherein information related to the session to process a call processing is needed in the pDLR 
240 being the private DLR and the private pDLR 240 having a function different from that of the 
public network DLR 160 is applied in order to solve the call processing. 
[0070] Since the private pDLR 240 does not have necessary data in its initial operation, the data 
can be arbitrarily inputted by a private EV-DO wireless network 100 manager. However, 
information in the public network DLR 160 should be used in the case of specific data. Even 
though the corresponding terminal AT 210 is located in the premises, the session of the AT 210 
is generated by the public network DLR 160, and most information necessary for the call 
processing is also stored in the public network DLR 160. 

[0071] Accordingly, the general private EV-DO wireless network 200 call processing is 
performed using the private pDLR 240, and in the case of the most necessary information, the 
private EV-DO call processing is performed using a method of obtaining necessary information 
from the public network DLR 160. As a result, in order that the private pDLR 240 requests and 
receives necessary data stored in the public network DLR 160, a dedicated line must be installed 
between the private pDLR 240 and the public network DLR 1 60. 

[0072] When private terminal authentication is performed using the private EV-DO wireless 
network 200, there occurs a problem when the private EV-DO wireless network 200 service is 
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1 provided by maintaining the session established in the public E V-DO wireless network 1 00. The 

2 problem is when the authentication task for the private terminal should be performed. 

3 [0073] hi the case of the AT 210 registered in the public network, there is no problem since 

4 when establishing the session of the terminal, an authentication task for the corresponding terminal 
5 . is performed by the public network AN- AAA 1 70 after the procedure of the session establishment. 
6 However, since tasks of session establishment and cancellation are not performed in the private 

-7 EV-DO wireless network 200 as described above, the task of authentication through the public 

. 8 AN- AAA 1 70 is not performed in the step of call processing when constructing the private EV-DO 

9 wireless network 200. That is, since the authentication through the public AN- AAA 170 is 

10 performed in a new session establishment after the initial session establishment and session 

11 cancellation, it is not possible to perform the authenticating step arbitrarily during the step of 

12 connecting to the network simply. 

13 [0074] As a result, the private EV-DO wireless network 200 must perform the authentication 

14 for the corresponding terminal, that is, a task for determining whether the corresponding terminal 

15 is an EV-DO terminal permitted in the private EV-DO wireless network 200 when the 

16 corresponding terminal is connected to the private EV-DO wireless network 200 instead of the 

17 session establishment step. 

1 8 [0075] In the private EV-DO wireless network 200, information related to the session is needed 

19 in the private pDLR 240 in order to process the call processing, and this information is obtained 

20 fi-om the public network DLR 1 60 connected using the dedicated line, wherein the private terminal 

21 AT 21 0 authentication is performed in the private pDLR 240 when the public network DLR 1 60 
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passes the session information to the private pDLR 240. 

[0076] The session information transmitted by the public network DLR 160 has various 
information. When a terminal not registered in the premises tries to connect to the private E V-DO 
wireless network 200 using information needed for the private authentication among the various 
information, authentication of the private terminal AT 210 is not permitted in the step of the call 
processing in order that a message of the next step is not transmitted. 

[0077] That is, the authentication of the private AT 2 1 0 is performed in the private pDLR 240 
when the public network DLR 1 60 transfers the session information to the private pDLR 240 using 
the pDLR 240. There is various information in the session information transmitted by the public 
network DLR 160, including MNID (or IMSI: International Mobile Station Identity) needed for 
the private authentication. 

[0078] The IMSI is a value having almost the same meaning as MIN (Mobile Identification 
Number) of 3G. The IMSI value is a value of which the public network AN AAA 170 informs 
the finally authenticated terminal while finishing the session establishment and performing the 
authentication. Since this value is already registered in the public network DLR 160, the IMSI 
value received from the public DLR 160 and the IMSI value of the private registered terminal 
stored in the private pDLR 240 in advance (a terminal which can be used in the premises) are 
compared in the private pDLR 240. 

[0079] As a result of the comparison, the procedure of the call processing is normally performed 
when the IMSI value of the corresponding terminal is an IMSI value registered in the private 
EV-DO wireless network 200, and otherwise, the private terminal is authenticated by enabling the 
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message of the next step not to be transmitted to the terminal. 

[0080] In the method for processing the user authentication in the private wireless high-speed 
data system in accordance with an embodiment of the present invention, which corresponds to the 
operation described above, a method for performing call processing and terminal authentication 
in a private EV-DO wireless network 200 will be explained step by step with reference to the 
accompanying drawings. 

[0081] FIG. 2 is a view showing a procedure of call processing between a private networlc and 
a public network when the call is first connected in the private network, in a method for 
performing terminal authentication and the call processing in a private wireless high-speed data 
system in accordance with an embodiment of the present invention, and FIG. 3 is a view showing 
a procedure of call processing when the call is connected again in the private EV-DO wireless 
network 200 after the procedure shown in FIG. 2 (after the private EV-DO wireless network tries 
to connect the first call). 

[0082] First, as shown in FIG. 2, when a wireless terminal AT 2 1 0 entering the private EV-DO 
wireless network 200 requests the first call connection to the private EV-DO wireless network 200, 
the wireless terminal AT 210 transmits a request signal to request a private EV-DO wireless 
network 200 connection to the private ANTS 220 (SI 01). 

[0083] The private ANTS 220 routes a private network connection request signal transmitted 
fi-om the AT 210 to the private pANC 230 through a router 225 (S102, S103). 
[0084] The private pNAC 230 provides the private pDLR 240 with a session information request 
signal used to request session information necessary for a private network connection according 
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1 to the private network connection request signal of the AT 210 routed by the router 225 (SI 04). 

2 However, when the corresponding AT 2 1 0 requested the connection for the first time, the private 

3 pDLR 240 does not store the session information for the corresponding AT 2 1 0. 

4 [00851 In the existing DLR call processing, when the session information for the corresponding 
5. terminal does not exist in the DLR, a message that the session information does not exist is 
6 ^ transmitted to the public ANC 130, and a procedure to open a new session starts. However, since 

- 7 the private EV-DO wireless network 200 must provide the private EV-DO wireless network 200 

^ 8 service in the state of maintaining the public network session endowed to the AT 210 without 

9 canceling it, a correction of the call processing is needed. 

10 [0086] Accordingly, when the session information for the corresponding terminal AT 2 1 0 is not 

1 1 stored in a database, the private pDLR 240 transmits a session information request message 

12 received from the pANC 230 to the public network DLR 1 60 as it is (S 1 05). 

13 [0087] The public network DLR 160 searches for session information of the corresponding 

14 terminal AT 2 1 0 which has requested the network connection stored in its database according to 

1 5 the session information request message transmitted from the private pDLR 240 and transmits the 

16 session information to the private pDLR 240 (S 1 06). 

1 7 [0088] The pDLR 240 receives the session information of the connection request terminal AT 

18 210 received from the public network DLR 1 60 and performs authentication of the AT 2 1 0 using 

19 the IMS! information included in the received session information. After completing the 

20 authentication, the pDLR 240 stores the session information of the received AT 2 1 0 in its database, 

21 and provides the private pANC 230 with the corresponding session information (S 1 07). That is, 
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1 the pDLR 240 extracts the IMSI value from the session information before storing the session 

2 information of the AT 210 received from the public network DLR 160 in its database, and 

3 compares the extracted IMSI value with the IMSI values of the private registration terminals stored 

4 in advance. When the corresponding IMSI value is the IMSI of the private registration terminal, 
5 , the session information received from the public network DLR 1 60 is stored in the database of the 
6 ^ private pDLR 240, and the remaining call processing procedure is performed. However, when the 

- 7 . same IMSI value does not exist in the pDLR 240, it is determined that the AT 210 was not 

^ 8 registered in the private EV-DO wireless network 200, and the session information received from 

9 the public network DLR 160 is not stored in the database and the call processing procedure is 

10 stopped. 

1 1 [0089] As a resuh, as to the private EV-DO wireless network 200 non-registered AT 2 1 0, the 

12 call processing is not performed from the initial connection. 

13 [0090] As described above, when the IMSI value of the session information received from the 

14 public network DLR 1 60 is identical to an IMSI of the private registration Ats stored in the private 

1 5 pDLR 240, that is, when the corresponding AT 2 1 0 is a terminal registered in the private EV-DO 

16 wireless network 200, the private pANC 230 assigns a traffic channel to the corresponding 

17 terminal AT 210 using the session information of the connection request terminal AT 210 

1 8 transmitted from the private pDLR 240 and performs a call connection with the terminal AT 2 1 0 

19 through the assigned channel (S 1 08). 

20 [0091] When the call connection is performed through the assigned channel as described above, 

21 the private pANC 23 0 registers the corresponding terminal AT 2 1 0 in the private pPDSN 260 and 
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performs data service through an Intranet (SI 09). 

[0092] After the terminal AT 2 1 0 entering the private EV-DO wireless network 200 performs 
the first call connection as described above, when the call connection is again performed, the call 
processing procedure will be briefly explained with reference to FIG. 3. 
[0093] First, when the wireless terminal AT 2 1 0 entering the private EV-DO wireless network 
200 requests a reconnection to the private EV-DO wireless network 200, the wireless terminal AT 
210 transmits a request signal to request the private EV-DO wireless network 200 connection to 
the private ANTS 220 (S201). 

[0094] The private ANTS 220 routes the private network connection request signal transmitted 
from the AT 210 to the pANC 230 through the router 225 (S202, S203). 
[0095] The private pANC 230 provides the session information request signal to request the 
session information necessary for the private network connection to the private pDLR 240 
according to the private network connection request signal of the AT 2 1 0 routed through the router 
225 (S204). 

[0096] The pDLR 240 searches for the session information of the corresponding terminal AT 
210 stored in the database according to the pANC 230 and transmits the searched session 
information to the pANC 230 (S205). 

[0097] Accordingly, the pANC 230 assigns a traffic channel to the corresponding terminal AT 
2 1 0 using the session information of the connection request terminal AT 210 transmitted from the 
private pDLR 240 and performs a call connection with the terminal AT 210 through the assigned 
channel (S206). 
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1 [0098] When the call connection is performed through the assigned channel as described above, 

2 the private pANC 230 registers the corresponding terminal AT 2 1 0 in the private pPDSN 260 and 

3 performs data service through an hitranet (S207). 

4 [0099] As a result, when a call re-connection is performed to the terminal AT 2 1 0 entering the 
5 . private EV-DO wireless network 200 after the first call connection, the call processing procedure 
6 ^ is very similar to that of FIG. 2, except that the call processing is performed using the session 

- 7 information stored in the pDLR 240 in the private EV-DO wireless network 200 without 

^ 8 requesting the session information to the public network DLR 160 since the session information 

9 of the corresponding terminal AT 210 is already stored in the private pDLR 240. At this time, 

10 since the authentication procedure of the corresponding AT 210 passed the authentication 

1 1 procedure when the first call is connected, separate authentication processing is not performed. 

12 [0100] A method of performing terminal authentication and call processing in a private wireless 

13 high-speed data system including the call processing procedure shown in FIGS. 2 and 3 in 

14 accordance with an embodiment of the present invention will be explained with reference to FIG. 

15 4. 

16 [0101 J FIG. 4 is a view showing an operational flow chart for a method for performing terminal 

1 7 authentication and call processing in a private wireless high-speed data system in accordance with 

1 8 the present invention. 

19 [0102] First, as shown in FIG. 4, when a wireless terminal AT entering the private EV-DO 

20 wireless network requests a call connection to the private EV-DO wireless network, the wireless 

2 1 terminal AT transmits a request signal to request the private EV-DO wireless network connection 
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to the private ANTS (S301). 

[0103] The private ANTS routes the private network connection request signal transmitted from 
the AT to the private pANC through a router (S302). 

[0104] The private pANC determines whether a call connection signal connected through the 
ANTS is a call connection signal for the private EV-DO wireless network connection or a call 
connection signal for a public EV-DO wireless network connection (S303). A determination as 
to whether the connection call of the AT is a private EV-DO wireless network connection call or 
a public EV-DO wireless network connection call is made by an identifier UATI included in the 
call connection request signal transmitted from the AT. 

[0105] As a result of the determination, when the call connection signal is a public EV-DO 
wireless network connection call, the public EV-DO wireless network processes the corresponding 
call by routing the corresponding call connection request signal to the public ANC (S304). 
[0106] However, when the call connection request signal of the AT is a private EV-DO wireless 
network connection request signal, the private pANC provides the private pDLR with the session 
information request signal to request session information necessary for the private network 
connection according the private network connection request signal of the AT routed through the 
router (S305). 

[0107] The private pDLR determines whether session information for a call connection request 
terminal AT requested from the extension pANC is stored (registered) in the database (S306). 
[0108] As a result of the determination, when no session information of the corresponding AT 
requesting the connection exists in the database of the private DLR, it is determined that a 
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1 connection to the private EV-DO wireless network is being tried for the first time, and the private 

2 pDLR requests the session information of the corresponding terminal to the public DLR of the 

3 public EV-DO wireless network (S307). That is, the private pDLR requests the session 

4 information of the corresponding AT to the public DLR since the private pDLR does not have the 
5 . session information for the corresponding AT when the corresponding AT requests the connection 
6 for the first time. 

" 1 [0109] Next, the public DLR searches for the session information of the corresponding AT 

, 8 which requested the network connection stored in its database according to the session information 

9 request message transmitted from the private pDLR and transmits the session information to the 

10 private pDLR (S308). 

11 [0110] The pDLR receives the session information of the connection request terminal AT 

1 2 received from the public network DLR, and extracts terminal authentication information included 

13 in the received session information, that is, the IMSI information (S309). 

14 [0111] Next, the pDLR compares the extracted IMSI information of the corresponding AT with 

15 the IMSI information of the private registration Ats registered in its database, and determines 

16 whether the corresponding IMSI information is registered in the database (S3 1 0). 

17 [0112] As a result of the determination, when the IMSI of the connection AT is not an IMSI 

18 registered in the pDLR database, the call processing is stopped, and a message for the call 

19 processing stop is transmitted to the corresponding AT. 

20 [0113] However, as a result of the determination, when the IMSI of the connection AT is an 

21 IMSI registered in the pDLR database, it is determined that the corresponding AT is an AT 
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1 registered in the private EV-DO wireless network and the session information transmitted from 

2 the public network DLR is stored in the database of the pDLR (S3 11 ), and then the corresponding 

3 session information is transmitted to the private pANC (S3 1 2). 

4 [0 1 14 J Accordingly, the private p ANC assigns the traffic channel to the corresponding terminal 
5- AT using the session information of the connection request AT transmitted from the private pDLR, 
6 . establishes the service, registers and connects in the pPDSN of the private EV-DO wireless 

' 7 network, and then performs the data service requested by the corresponding AT (S3 1 3, S3 14). 

, 8 [0115] On the other hand, in the step S306, when the session information for the call connection 

9 request AT requested from the private pANC is stored in the database of the private pDLR, that 

10 is, when the corresponding terminal performs a call connection to the private EV-DO wireless 

1 1 network at least two or more times, the session information of the corresponding AT stored in the 

12 database of the private pDLR is transmitted to the private pANC (S3 1 2). Here, when the AT is 

13 initially connected to the private EV-DO wireless network, the session information for the 

14 corresponding AT is received from the public DLR and stored in the private pDLR. Therefore, 

1 5 when the call connection is performed afterward, the session information of the corresponding AT 

16 is not received from the public DLR and the private EV-DO wireless network itself performs the 

1 7 call processing using the session information of the corresponding AT stored in the private pDLR. 

18 [0116] Accordingly, the private pANC assigns the traffic channel to the corresponding terminal 

19 AT using the session information of the connection request terminal AT transmitted from the 

20 private pDLR and performs the call processing necessary for the connection (S3 13, S3 14). 

21 [0117] As a result, the method for performing terminal authentication and call processing in the 
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1 private wireless high-speed data system in accordance with an embodiment of the present 

2 invention arranges the private pDLR to take charge of the authentication and call processing of the 

3 private network entrance terminal in the private EV-DO wireless network, receives the session 

4 information of the corresponding terminal from the public EV-DO network DLR only when the 
5. terminal entering the private EV-DO wireless network requests the first call connection, stores the 
6 session information in the database of the private pDLR, and performs the call processing and 

- 7 authentication. 

8 [0118] The authentication of the corresponding terminal is performed by extracting the IMSI 

9 of the terminal included in the session information of the corresponding terminal and determining 

10 whether the extracted IMSI is registered in the pDLR database of the private EV-DO wireless 

1 1 network, without installing a separate AN_AAA in the private EV-DO wireless network. 

12 [0119] When the call connection is requested from the terminal entering the private network at 

13 least two or more times, the call processing is performed using the session information for the 

14 corresponding terminal stored in the private pDLR without a separate authentication procedure. 

15 [0120] An apparatus for performing terminal authentication and call processing in a private 

16 wireless high-speed data system in accordance with an embodiment of the present invention and 

1 7 a method thereof reduces unnecessary loading in a public network DLR side according to a private 

18 EV-DO wireless network construction since after session information needed for the call 

19 processing is secured from a public network DLR when the call is connected for the first time, the 

20 following call processing can be performed by a private network DLR. 

21 [0121] Furthermore, since the minimum function of the private DLR, that is, a function related 
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with session establishment and cancellation is performed in the public network DLR and the only 
remaining function is performed in the private DLR, it is possible to use low capacity hardware 
when the private DLR apparatus is constructed, thereby resulting in a saving in the cost of 
materials. 

[0122] Also, since the private terminal authentication can be performed by enabling a DLR 
function and a terminal private authentication function to be supported simultaneously using only 
the private pDLR, without purchasing a separate AN_AAA server, the total cost of the private 
EV-DO wireless network system is reduced and an operational cost necessary for managing a 
separate server is eliminated. 
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